Feb 1, 2023
1 new incident, 0 with updates.
Started
- ClosedHighPatched
Fortra GoAnywhere MFT zero-day: Cl0p claims 130 victims
A pre-auth deserialization/command injection in the GoAnywhere MFT admin console's License Response Servlet was exploited as a zero-day. The Cl0p gang said it stole data from more than 130 organisations, a rehearsal for the later MOVEit campaign.
Fortra GoAnywhere MFTClosed Feb 10, 2023